Skip to content

Upgrade CNI plugins from v1.5.1 to v1.6.2#6796

Merged
antoninbas merged 1 commit into
antrea-io:mainfrom
luolanzone:upgrade-cni-plugin
Feb 7, 2025
Merged

Upgrade CNI plugins from v1.5.1 to v1.6.2#6796
antoninbas merged 1 commit into
antrea-io:mainfrom
luolanzone:upgrade-cni-plugin

Conversation

@luolanzone
Copy link
Copy Markdown
Contributor

@luolanzone luolanzone marked this pull request as draft November 9, 2024 14:11
@luolanzone
Copy link
Copy Markdown
Contributor Author

After did a verification locally, it turns out that the latest cni plugin 1.6.0 still have the CVE, we need to wait the next CNI release to fix it. convert to a draft version first.

@antoninbas
Copy link
Copy Markdown
Contributor

v1.6.2 is out now

Signed-off-by: Lan Luo <luola@vmware.com>
@luolanzone luolanzone marked this pull request as ready for review February 7, 2025 01:59
@luolanzone luolanzone changed the title Upgrade CNI plugins from v1.5.1 to v1.6.0 Upgrade CNI plugins from v1.5.1 to v1.6.2 Feb 7, 2025
@luolanzone
Copy link
Copy Markdown
Contributor Author

Hi @antoninbas I have verified a local image with these new cni plugins, the CVE is gone now. Can you take a look?
btw, the image scan is failed in v2.1.1 because of the same CVE, should we backport this to v2.1 and v2.2 as well?

@antoninbas
Copy link
Copy Markdown
Contributor

@luolanzone Yes, backporting this sounds fine to me

@antoninbas
Copy link
Copy Markdown
Contributor

/test-all

@antoninbas antoninbas merged commit d1ed243 into antrea-io:main Feb 7, 2025
@luolanzone luolanzone deleted the upgrade-cni-plugin branch February 8, 2025 01:58
luolanzone added a commit to luolanzone/antrea that referenced this pull request Feb 8, 2025
Signed-off-by: Lan Luo <luola@vmware.com>
luolanzone added a commit to luolanzone/antrea that referenced this pull request Feb 8, 2025
Signed-off-by: Lan Luo <luola@vmware.com>
antoninbas pushed a commit that referenced this pull request Feb 10, 2025
Signed-off-by: Lan Luo <luola@vmware.com>
antoninbas pushed a commit that referenced this pull request Feb 10, 2025
Signed-off-by: Lan Luo <luola@vmware.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants